Traffic Trace Info
DumpFile: -
Id: 200803202300
StartTime: Thu Mar 20 23:00:00 2008
EndTime: Thu Mar 20 23:15:01 2008
TotalTime: 900.32 seconds
TotalCapSize: 745.23MB CapLen: 96 bytes
# of packets: 13638504 (7580.95MB)
AvgRate: 70.64Mbps stddev:13.17M
IP flow (unique src/dst pair) Information
# of flows: 851564 (avg. 16.02 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.8% 2.9% 2.8% 2.4% 1.6% 1.6% 1.3% 1.2% 1.1% 1.0%
IP address Information
# of IPv4 addresses: 504806
Top 10 bandwidth usage (bytes/total in %):
11.5% 10.7% 9.6% 9.4% 3.9% 3.9% 3.0% 3.0% 2.9% 2.8%
# of IPv6 addresses: 1367
Top 10 bandwidth usage (bytes/total in %):
32.0% 25.6% 9.9% 9.9% 4.8% 4.7% 4.0% 4.0% 3.2% 2.8%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200803202300.pktlen.png)
detailed numbers
[ 32- 63]: 3724914
[ 64- 127]: 3557174
[ 128- 255]: 818986
[ 256- 511]: 538065
[ 512- 1023]: 330891
[ 1024- 2047]: 4668474
Protocol Breakdown
![[protocol breakdown chart]](200803202300.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 13638504 (100.00%) 7949199360 (100.00%) 582.85
ip 13610894 ( 99.80%) 7943848245 ( 99.93%) 583.64
tcp 10864993 ( 79.66%) 7488065336 ( 94.20%) 689.19
http(s) 3187018 ( 23.37%) 4401824256 ( 55.37%) 1381.17
http(c) 1982617 ( 14.54%) 170652466 ( 2.15%) 86.07
squid 907590 ( 6.65%) 563524943 ( 7.09%) 620.90
smtp 959224 ( 7.03%) 163664099 ( 2.06%) 170.62
nntp 3 ( 0.00%) 186 ( 0.00%) 62.00
ftp 42344 ( 0.31%) 4239394 ( 0.05%) 100.12
pop3 6068 ( 0.04%) 2718523 ( 0.03%) 448.01
imap 3934 ( 0.03%) 985562 ( 0.01%) 250.52
telnet 23 ( 0.00%) 1765 ( 0.00%) 76.74
ssh 45331 ( 0.33%) 9123518 ( 0.11%) 201.26
dns 2488 ( 0.02%) 192432 ( 0.00%) 77.34
bgp 203 ( 0.00%) 62487 ( 0.00%) 307.82
napster 357 ( 0.00%) 33738 ( 0.00%) 94.50
realaud 27 ( 0.00%) 4278 ( 0.00%) 158.44
rtsp 36891 ( 0.27%) 33967911 ( 0.43%) 920.76
icecast 13318 ( 0.10%) 15273527 ( 0.19%) 1146.83
hotline 5 ( 0.00%) 739 ( 0.00%) 147.80
other 3677549 ( 26.96%) 2121795332 ( 26.69%) 576.96
udp 2037527 ( 14.94%) 395064486 ( 4.97%) 193.89
dns 1212100 ( 8.89%) 176229451 ( 2.22%) 145.39
realaud 11680 ( 0.09%) 5634709 ( 0.07%) 482.42
halflif 18 ( 0.00%) 1888 ( 0.00%) 104.89
starcra 194 ( 0.00%) 18439 ( 0.00%) 95.05
everque 34 ( 0.00%) 7559 ( 0.00%) 222.32
unreal 117 ( 0.00%) 7888 ( 0.00%) 67.42
quake 20 ( 0.00%) 2268 ( 0.00%) 113.40
cuseeme 9 ( 0.00%) 903 ( 0.00%) 100.33
other 813330 ( 5.96%) 213143979 ( 2.68%) 262.06
icmp 683371 ( 5.01%) 56491832 ( 0.71%) 82.67
ipip 368 ( 0.00%) 43144 ( 0.00%) 117.24
ip6 1120 ( 0.01%) 158186 ( 0.00%) 141.24
other 23515 ( 0.17%) 4025261 ( 0.05%) 171.18
frag 1773 ( 0.01%) 1525341 ( 0.02%) 860.32
ip6 27610 ( 0.20%) 5351115 ( 0.07%) 193.81
tcp6 10025 ( 0.07%) 1082444 ( 0.01%) 107.97
http(s) 4 ( 0.00%) 526 ( 0.00%) 131.50
http(c) 7039 ( 0.05%) 631089 ( 0.01%) 89.66
smtp 593 ( 0.00%) 182884 ( 0.00%) 308.40
pop3 66 ( 0.00%) 6460 ( 0.00%) 97.88
bgp 106 ( 0.00%) 12343 ( 0.00%) 116.44
other 2217 ( 0.02%) 249142 ( 0.00%) 112.38
udp6 11297 ( 0.08%) 2223475 ( 0.03%) 196.82
dns 10215 ( 0.07%) 1980075 ( 0.02%) 193.84
other 1082 ( 0.01%) 243400 ( 0.00%) 224.95
icmp6 5028 ( 0.04%) 723958 ( 0.01%) 143.99
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 1229 ( 0.01%) 1317022 ( 0.02%) 1071.62
tcpdump file: 200803202300.dump.gz (353.63 MB)